Inventory and review this Django repository without changing it. Cite exact files and line-level locations when useful.

Explain:

- project and application structure;
- URL routing from request to view;
- models, relationships, migrations, and SQLite persistence;
- forms, templates, static assets, and administrator registration;
- login, logout, sessions, password validation, and CSRF protection;
- the difference between `is_authenticated`, application permissions, `is_staff`, and `is_superuser` in this application;
- public, employee, manager, and administrator capabilities;
- how employee records are filtered to their owner;
- how manager records are limited to teams they manage;
- every protected direct URL and its enforcement point;
- tests for successful, redirected, forbidden, not-found, and cross-user behavior;
- current Git branch, remotes, status, and baseline commit;
- any gap where presentation hides a link but the server does not enforce the same rule.

Produce a role-and-route matrix containing the expected result for anonymous visitors, employees, managers, and administrators. Distinguish verified facts from inference. Do not edit, migrate, seed, stage, commit, push, or create a branch.